Proposed British Digital Information & Smart Data Bill

The new UK government used the recent King’s Speech upon the opening of Parliament to announce a proposal for a new Digital Information and Smart Data Bill (the “Bill”). 
 
The proposed Bill builds on the legacy of the Data Protection and Digital Innovation Bill (“DPDI Bill”) that was discussed extensively in the previous Parliamentary session (but which failed to become law prior to the dissolution of Parliament prior to the July 2024 UK general election) by intending to lay a baseline for a new era of data governance within the UK. 

Background

The Bill follows on the heels of the DPDI Bill, which fell away in the parliamentary wash-up prior to the general election. The DPDI intended to update the UK’s data protection framework, including establishing a statutory regime for Smart Data and Digital ID (being digital identity verification frameworks). The DPDI Bill had received wide-ranging legislative scrutiny prior in the previous parliamentary session and was anticipated to become law. 

Accordingly, the proposed Bill will amend and update the UK’s data protection regime, although many of the concepts that the Bill is likely to cover are taken directly from the defunct DPDI Bill. The key aspects that are to be covered in the Bill are set out below. 

Digital Verification Services

As originally proposed in the DPDI Bill, the Bill will seek to establish digital verification services in the UK, empowering individuals and businesses to embrace secure digital identities. This is intended to create added convenience in everyday life such as assisting with age verification checks, pre-employment checks and moving house, and have broad applicability across a range of sectors. Digital identities are expected to foster economic growth through adding efficiency to common time-consuming processes. 

National Underground Asset Register (NUAR)

The Bill also introduces the NUAR; a digital map intended to revolutionise infrastructure management by providing planners, operators and engineers with instant access to data on the pipes, cables and other network assets functioning underground. This is intended to enable efficient maintenance, repair and operation of such items.  

Smart Data Schemes: Unlocking Insights Across Sectors

Smart Data Schemes will be introduced through the Bill, which enable the secure sharing of customer data through authorised third party providers. This puts forward a wide potential of opportunities, such as seamless financial management across a range of customer accounts. 

Revising The Digital Economy Act 

The Bill will strengthen public services through revisions to the Digital Economy Act, permitting the Government to share data about businesses that use public services. One of the ultimate intentions here is to eventually move to an electronic system for birth and death registrations, thus streamlining and developing efficiencies in this area. 

Strengthening The ICO

Under the Bill, the ICO (the UK’s data protection regulator) will receive enhanced regulatory powers, which will come alongside the clarification of data laws that are currently obstructing the safe development and deployment of new technologies. 

Who Will The Bill Affect?

The key businesses affected by the Bill will be those operating in the digital verification and identity sector, or users of these services (for example organisations in the financial services sector). The developments put forward by the Bill will act as a core foundation for establishing and regulating digital identity verification technologies within the UK.

The Smart Data Schemes proposed by the Bill will act as a legal backbone for data portability programmes, and will particularly be useful for those working in open banking through the enhancement of customer data with contextual ‘business’ data, thus improving decision making in the open banking landscape. 

Key Implications

If enacted in line with the Government’s announced intentions, the Bill will be a pivotal move for the UK’s data protection landscape, particularly in respect of its reforms around Digital Verification Service (the process of confirming an online identity). The King’s Speech indicated that the government estimates these reforms to produce £600 million in economic benefit annually. 

The Bill is intended to nurture and develop the implementation of digital technologies within the UK, thus boosting the UK’s reputation as a global leader in respect of technological development and related legislative provisions. Further developments and insights on the Bill will be revealed in the coming months and potentially-affected businesses should be alive to this evolution.

David Varney is Partner at independent UK law firm Burges Salmon  

Image: 

You Might Also Read: 

Taming Aggressive Algorithms:


If you like this website and use the comprehensive 6,500-plus service supplier Directory, you can get unrestricted access, including the exclusive in-depth Directors Report series, by signing up for a Premium Subscription.

  • Individual £5 per month or £50 per year. Sign Up
  • Multi-User, Corporate & Library Accounts Available on Request

Cyber Security Intelligence: Captured Organised & Accessible


 

« Student Who Sold Cyber Attack Software Is Jailed
The CrowdStrike Incident Means Companies Must Review Their Cloud Strategies »

CyberSecurity Jobsite
Perimeter 81

Directory of Suppliers

Authentic8

Authentic8

Authentic8 transforms how organizations secure and control the use of the web with Silo, its patented cloud browser.

IT Governance

IT Governance

IT Governance is a leading global provider of information security solutions. Download our free guide and find out how ISO 27001 can help protect your organisation's information.

Clayden Law

Clayden Law

Clayden Law advise global businesses that buy and sell technology products and services. We are experts in information technology, data privacy and cybersecurity law.

DigitalStakeout

DigitalStakeout

DigitalStakeout enables cyber security professionals to reduce cyber risk to their organization with proactive security solutions, providing immediate improvement in security posture and ROI.

Syxsense

Syxsense

Syxsense brings together endpoint management and security for greater efficiency and collaboration between IT management and security teams.

CEPS

CEPS

CEPS is a leading think tank and forum for debate on EU affairs, ranking among the top think tanks in Europe. Topic areas include Innovation, Digital economy and Cyber-security.

Sintef Digital

Sintef Digital

Sintef Digital carries out research in Information and Communication Technology for industry and the public sector.

Recorded Future

Recorded Future

Recorded Future arms security teams with threat intelligence powered by patented machine learning to lower risk.

Viasat

Viasat

Viasat is a provider of high-speed satellite broadband services and secure networking systems covering military and commercial markets.

ICTSecurity Portal

ICTSecurity Portal

The ICTSecurity Portal is an interministerial initiative in cooperation with the Austrian economy and acts as a central internet portal for topics related to security in the digital world.

Stage2Data

Stage2Data

Stage2Data is one of Canada’s most trusted cloud solution providers offering hosted Backup and Disaster Recovery Services.

SlowMist

SlowMist

SlowMist is a blockchain ecosystem security company providing cybersecurity audits and protection for leading digital asset exchanges, crypto wallets, public chains, and smart contracts.

C2SEC

C2SEC

C2Sec provides an innovative analytics platform that assesses and quantifies cyber risks in financial terms based on combining patented big data, AI, and cybersecurity technologies.

M2MD Technologies

M2MD Technologies

M2MD Technologies offers solutions optimized for cellular IoT that provide stronger security, reduced costs, enhanced user experience, and ultimately generates higher returns for stakeholders.

Bionic

Bionic

Bionic is an agentless way to get control over your increasingly complex applications so you can manage, operate, and secure them faster and more efficiently.

Hyperion Gray

Hyperion Gray

Hyperion Gray are a small research and development team focused on innovative work in a variety of areas including Software & Security Research, Penetration Testing, Incident Response, and Red Teaming

Spike Reply

Spike Reply

Spike Reply is the company within the Reply Group focusing on cybersecurity and personal data protection.

RiskOptics

RiskOptics

RiskOptics (formerly Reciprocity) equips organizations with one of the most intuitive and powerful information security and cyber risk management solutions in the market.

SecureTeam

SecureTeam

SecureTeam are a UK-based information security practice, specialising in all areas of cybersecurity.

Lineaje

Lineaje

Lineaje solves critical Software Supply Chain security problems faced by every organization that builds, uses or sells software.

CheapSSLWEB

CheapSSLWEB

CheapSSLWeb.com is an affordable and trusted SSL/TLS certificate provider from globally recognized CA (Certificate Authority) Comodo, Sectigo, and Certera..